airventriloquist-ng(8)

airventriloquist-ng8

Encrypted wifi packet injection

Usage

airventriloquist-ng [options]

Overview

airventriloquist-ng injects on encrypted WiFi packet and circumvents wireless intrusion prevention systems.

Options

--help

Shows the help screen.

-i <replay interface>

Interface to capture and inject. Mandatory option.

-d, --deauth

Sends active deauthentications frames to encrypted stations.

-e <value>, --essid <value>

ESSID of target network. For SSID containing special characters, see https://www.aircrack-ng.org/doku.php?id=faq#how_to_use_spaces_double_quote_and_single_quote_etc_in_ap_names

-p <value>, --passphrase <value>

WPA Passphrase of the target network. Passphrase is between 8 and 63 characters long.

-c, --icmp

Respond to all ICMP frames (Debug).

-n, --dns

IP to resolve all DNS queries to.

-s <URL>, --hijack <URL>

URL to look for in HTTP requests when hijacking connections. The URL can have wildcards characters. Example: *jquery*.js*

-r <URL>, --redirect <URL>

URL to redirect hijacked connections to.

-v, --verbose

Verbose output.

Releases

5 releases since Debian 10 (Buster); the text changed 2 times.

  1. 10
  2. 11
  3. 12–Arch

From aircrack-ng 1.7-7 in Arch Linux 2026-11-01. Parsed by carta from the page's man source.